Feedback
Internet protocols are only one means of protecting data in transit. IBM Cloud provides many IBM Cloud products and services to aid organizations in creating a more secure environment.
VPNs are a secure, point-to-point connection between two
network end points that establish encrypted channels.
A WAN connects computers over a wide area, such as from region
to region, or continent to continent.
An IP address is a unique identifier assigned to every device
connected to a network that uses IP for communication.
Applications or services use port numbers to receive specific
messages.
A network router’s purpose is to send information between
networks.
TLS is the only way to secure a connection to the applications
deployed on IBM Cloud via a web server.
Firewalls prevent access to parts of the network based on security rules. Gateways reroute all traffic on a VLAN to a specific point.
The three network architectures that serve as the foundation for IBM Cloud Classic Infrastructure are the public, private, and management networks.
A VPN uses the public internet to connect an organization's IBM Cloud network to their on-premises data centers and other cloud resources.
ACLs manage both inbound and outbound traffic for a subnet. By default, an ACL allows all traffic access to the subnet. A subnet may include only one ACL. An ACL may be used across multiple subnets.
A security group is a collection of rules that apply to an instance. A security group can be applied to more than one instance. An instance can be associated with more than one security group. Security groups specify what traffic to allow for an instance, not the entire subnet.
A public gateway allows multiple instances included in a single subnet to access the internet, but it does not allow any resources from the internet to access resources within the subnet.
FortiGate Security Appliance is another gateway device that can be
used on the IBM Cloud Classic network to safely transfer data between servers in
different locations
The IBM Cloud Direct Link offering will allow a company to have a
private, secure, high-throughput connection to IBM Cloud.
The geographic area in which an IBM Cloud VPC is deployed is
called a region.
In IBM Cloud VPC, a security group acts as a firewall.
A client should use VPN Gateway if they need to securely connect
to an IBM Cloud VPC over the internet.
The company should use a Public Gateway.
A Transit Gateway can connect two IBM Cloud VPCs so that they
can seamlessly communicate with each other.
A Floating IP will allow customers to connect directly to a virtual
server instance while they are ordering products off the internet.
In IBM Cloud VPC, three is the minimum number of zones in a
multizone region.
IBM Cloud provides specific load balancing options for Classic and VPC networks. IBM Cloud Load Balancers for Classic networks and Application Load Balancer and Network Load Balancers for VPC networks.
Cloud Service Endpoints and Virtual Private Endpoints can be used to create a private connection using the IBM Cloud backbone between a database and a virtual server.
CIS assists with security management, provides a NTP server, and provides functionality to assist with routing and caching rules. It is available in all data centers and can be ordered using the IBM Cloud Catalog.
Hardware load balancers are less flexible and scalable.
The Web Application Firewalls (WAFs) feature of IBM Cloud Internet
Services (CIS) helps protect web applications by filtering and monitoring HTTP
traffic between the application and the internet.
Service endpoints require virtual routing and forwarding (VRF) be
enabled to be able to connect to a service properly.
A reason to use VPEs in a VPC is to enable private communication
between virtual server instances and IBM Cloud services.
The components Network Address Translation in IBM Cloud
Classic could use are virtual or physical network appliance (Vyatta, Juniper
vSRX, Fortinet FSA).
The IBM Cloud Classic infrastructure uses a virtual or physical
network appliance for gateway routing.
Improved network performance, security, and reliability are the
benefits of using IBM Cloud Internet Services.
Tissues - Practice Quiz